BTC 
ETH 
BNB 
XRP 
SOL 
TRX ZachXBT: Binance and Bitget exploit funds commingled via THORChain
ZachXBT reported that stolen funds from a $6.3B Binance exploit and a $388M Bitget exploit were commingled at the same address 45 minutes before the post, after arriving via THORChain. The post states this indicates the same actor is likely behind both incidents. It also says the Bitget exploit was attributed to DPRK-linked TraiderTraitor, which had overlap with other previous exploits such as Kelp DAO.
Why “Unverified”
- Reported by ZachXBT alone, with no second source or primary confirmation yet
1 independent source group across 1 post · evidence score 81/100. How labels work
What the sources claim
-
Stolen funds from the Binance and Bitget exploits were commingled at the same address after arriving via THORChain.
“Stolen funds from the $6.3B Binance exploit and $388M Bitget exploit were commingled at the same address 45 minutes ago, after arriving via THORChain.”
ZachXBT -
The commingling indicates the same actor is likely behind both incidents.
“This indicates the same actor is likely behind both incidents.”
ZachXBT -
The Bitget exploit was attributed to DPRK-linked TraiderTraitor, which overlapped with other previous exploits such as Kelp DAO.
“The Bitget exploit was attributed to DPRK-linked TraiderTraitor, which had overlap with other previous exploits such as Kelp DAO.”
ZachXBT
Sources
More in Hacks & Security
Summary and claims extracted by AI with prompt analyze-story@5 on 2026-10-31 00:00 UTC. Labels are computed from the sources, not by the model.